Search papers, labs, and topics across Lattice.
ConVer is introduced, a compositional verification tool that leverages LLMs to synthesize function contracts from system properties, enabling top-down formal verification of C programs. It alternates system-level and function-level checks within a CEGAR-CEGIS loop, refining contracts via SMART ICE learning to address state-space explosion challenges. Experiments across several benchmark suites demonstrate ConVer's effectiveness, achieving significant verification success rates compared to state-of-the-art tools, particularly on simpler programs and after a single CEGAR-CEGIS iteration.
LLMs can now automatically synthesize function contracts to enable scalable formal verification of C code, outperforming traditional methods on several benchmarks.
Formal verification of large C programs is impeded by state-space explosion: Bounded Model Checking (BMC) tools must encode the entire state space up to the predetermined bound by unrolling all nested constructs. We present ConVer, a top-down compositional verification tool. Given a C program with a top-level assertion, ConVer decomposes verification top-down: it uses a large language model (LLM) to synthesise function contracts from the system property, then alternates system-level and function-level checks in a CEGAR-CEGIS loop, refining contracts whenever a check fails via SMART ICE learning. We evaluate ConVer on four benchmark suites of increasing difficulty and against other state-of-the-art (SOTA) tools. On the Frama-C benchmark of 45 simple C programs, ConVer achieves 82-96% verification success across three LLM backends, with 93-95% of converged programs requiring only a single CEGAR-CEGIS iteration. On the X.509 parser benchmark (6~programs) and LF2C-Simple suite (17 programs), ConVer achieves 33-50% and 82-88% success respectively. On the VerifyThis suite of 11 recursive and loop-intensive programs, the Pre-Abstraction strategy achieves 55-64% success. In addition, we present ESBMC-LF a preprocessor tool that converts LF models to C while preserving the properties of the LF files, enabling ConVer to verify them. We transpile the LF Verifier Benchmarks using ESBMC-LF to C; we denote those LF-Hard. We show that ConVer successfully verifies 67% of LF-Hard benchmarks overall.
